Out-of-Bounds Write Vulnerability in ggml-org Llama.cpp Pocket-TTS Component
CVE-2026-116096
Key Information:
Badges
What is CVE-2026-116096?
A vulnerability exists in the ggml-org Llama.cpp Pocket-TTS component, specifically in the function list_pockettts_state_slots within the source file tools/mtmd/models/pockettts-gen.cpp. This flaw allows for an out-of-bounds write due to the manipulation of the mmproj argument. While exploitation of this vulnerability necessitates local access, public exploits have been made available. To mitigate this issue, users are urged to upgrade to version b11796, which incorporates a fix addressing previously silent heap out-of-bounds write conditions. However, it is important to note that while a temporary mitigation via assertion checks has been implemented, the root cause related to malformed mmproj files remains under review for a more permanent resolution.
Affected Version(s)
llama.cpp 0.4.0
llama.cpp 0.17.1
llama.cpp 55abc39
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved